Plogger Gallery 1.0 - Cross-Site Request Forgery (Change Admin Password)

------------------------------------------------------------------------- Software : PloggerGallery Version 1.0 Author : Or4nG.M4N Date : n/a Dork : Forbidden Software Link : http://www.plogger.org/download/ ------------------------------------------------------------------------- +---+CSRF Chang...

PHPGallery 1.1.0 - Cross-Site Request Forgery

------------------------------------------------------------------------- Software : phpgallery v 1.1.0 : Author : Or4nG.M4N Date : n/a Dork : Forbidden Software Link: http://www.hotscripts.com/listing/phpgallery/ : -------------------------------------------------------------------------...

PHPGallery 1.1.0 - Cross-Site Request Forgery

PHPGallery 1.1.0 - Cross-Site Request Forgery ------------------------------------------------------------------------- Software : phpgallery v 1.1.0 : Author : Or4nG.M4N Date : n/a Dork : Forbidden Software Link: http://www.hotscripts.com/listing/phpgallery/ :...

osCommerce v2.2 CSRF Vulnerability

Exploit for php platform in category web applications ================================== osCommerce v2.2 CSRF Vulnerability ================================== Exploit Title: osCommerce v2.2 Change Admin Pass Date: date Author: daandeveloper33 Software Link: http://oscommerce.com/ Version: v2.2...

SweetRice 0.6.7 Cross Site Scripting / SQL Injection

========================================== Vulnerability ID: HTB22667 Reference: http://www.htbridge.ch/advisory/sqlinjectioninsweetricecms.html Product: SweetRice CMS Vendor: basic-cms.org http://www.basic-cms.org/ Vulnerable Version: 0.6.7 Vendor Notification: 21 October 2010 Vulnerability Type...

SweetRice 0.6.7 - Multiple Vulnerabilities

SweetRice 0.6.7 - Multiple Vulnerabilities Vulnerability ID: HTB22669 Reference: http://www.htbridge.ch/advisory/resetadminpasswordinsweetricecms.html Product: SweetRice CMS Vendor: basic-cms.org http://www.basic-cms.org/ Vulnerable Version: 0.6.7 Vendor Notification: 21 October 2010 Vulnerabilit...

Bigace_2.7.3 CSRF Change Admin Password POC

Exploit for php platform in category web applications =========================================== Bigace2.7.3 CSRF Change Admin Password POC =========================================== !/usr/bin/python Exploit Title : Bigace2.7.3 CSRF Change admin password POC Software : Bigace 2.7.3 Software lin...

Bigace 2.7.3 Cross Site Request Forgery

!/usr/bin/python Exploit Title : Bigace2.7.3 CSRF Change admin password POC Software : Bigace 2.7.3 Software link : http://www.bigace.de/download.html Autor : Sweet Email : [email protected] Date : 26/10/2010 Software version : 2.7.3 Software detail: BIGACE - Dynamic Web CMS - is a free,...

BigACE 2.7.3 - Cross-Site Request Forgery (Change Admin Password)

BigACE 2.7.3 - Cross-Site Request Forgery Change Admin Password !/usr/bin/python Exploit Title : Bigace2.7.3 CSRF Change admin password POC Software : Bigace 2.7.3 Software link : http://www.bigace.de/download.html Autor : Sweet Email : [email protected] Date : 26/10/2010 Software version : 2.7...

R7-0037: SAP BusinessObjects Axis2 Default Admin Password

R7-0037: SAP BusinessObjects Axis2 Default Admin Password October 13th, 2010 Description: The SAP BusinessObjects product contains a module dswsbobje.war which deploys Axis2 with an administrator account which is configured with a static password. As a result, anyone with access to the Axis2 port...

Travel Portal Script - Cross-Site Request Forgery (Admin Password Change)

Travel Portal Script - Cross-Site Request Forgery Admin Password Change ===================================================== Travel PORTAL Explotation| Exploit.HTML ========CSRF Html Exploit========= Exploited by KnocKout Travel Portal - Remote Admin Password Change CSRF Exploited by KnocKout...

Event Ticket Portal Script Cross Site Request Forgery

=========================================================== Event Ticket PORTAL Explotation| Exploit.HTML ========CSRF Html Exploit========= Event Ticket PORTAL - Admin Password Chage CSRF Exploited by KnocKout Username: New Password: input type="subm...

Travel Portal Cross Site Request Forgery

===================================================== Travel PORTAL Explotation| Exploit.HTML ========CSRF Html Exploit========= Exploited by KnocKout Travel Portal - Remote Admin Password Change CSRF Exploited by KnocKout Admin Name:admin New Password:input type="password" name="password" size="...

Event Ticket Portal Script Admin Password Change - Cross-Site Request Forgery

=========================================================== Event Ticket PORTAL Explotation| Exploit.HTML ========CSRF Html Exploit========= Event Ticket PORTAL - Admin Password Chage CSRF Exploited by KnocKout Username: New Password: /table...

Travel Portal Script - Cross-Site Request Forgery (Admin Password Change)

===================================================== Travel PORTAL Explotation| Exploit.HTML ========CSRF Html Exploit========= Exploited by KnocKout Travel Portal - Remote Admin Password Change CSRF Exploited by KnocKout Admin Name:admin New Password: input type="submit" name="...

Event Ticket Portal Script Admin Password Change - Cross-Site Request Forgery

Event Ticket Portal Script Admin Password Change - Cross-Site Request Forgery =========================================================== Event Ticket PORTAL Explotation| Exploit.HTML ========CSRF Html Exploit========= Event Ticket PORTAL - Admin Password Chage CSRF Exploited by KnocKout Username...

Travel PORTAL <= Admin Password Change (CSRF) Exploit

Exploit for php platform in category web applications ===================================================== Travel PORTAL Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail : submitatinj3ct0r.com 1 0 0 1 1 0 I'm KnocKout...

Event Ticket PORTAL <= Admin Password Change (CSRF) Exploit

Exploit for php platform in category web applications =========================================================== Event Ticket PORTAL Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail : submitatinj3ct0r.com 1 0 0 1 1 0 I'...

Rapid7 Security Advisory 37

R7-0037: SAP BusinessObjects Axis2 Default Admin Password October 13th, 2010 Description: The SAP BusinessObjects product contains a module dswsbobje.war which deploys Axis2 with an administrator account which is configured with a static password. As a result, anyone with access to the Axis2 port...

SAP BusinessObjects Axis2 Default Admin Password

Overview The Axis2 component of SAP BusinessObjects contains a default administrator account and password. Description The SAP BusinessObjects product contains a module dswsbobje.war which deploys Axis2 with an administrator account which is configured with a static password. As a result, anyone...